$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32f3d38e-c211-345a-82f5-50a97e79c6ef.roa File: 32f3d38e-c211-345a-82f5-50a97e79c6ef.roa (raw, json) Hash identifier: c6IVWFw11+40w3sqctHOzGG9zTu2PwNVCkmU03XGKqg= Subject key identifier: 57:2D:EC:64:7A:25:D9:91:F7:7A:51:1B:5F:A3:10:5D:84:D2:2C:85 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6691EF2A9CC501D7D3D760 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32f3d38e-c211-345a-82f5-50a97e79c6ef.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 69.66.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:91:ef:2a:9c:c5:01:d7:d3:d7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=82ba3139-2d58-48c6-9f08-b1e39502ef77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:f4:38:10:d7:b1:9d:a2:ba:79:ea:c0:37: 42:5b:9c:be:59:c5:bb:79:f3:39:05:91:0e:c0:ff: 4f:00:10:29:89:d7:09:eb:48:36:dd:64:7f:f1:e0: bf:31:2a:c0:de:6f:d1:b6:46:42:37:a2:e9:27:c7: df:d0:34:9e:34:51:12:f5:3c:19:ff:0a:6e:5b:17: 2d:60:4c:5c:d6:d3:8d:b4:ec:1b:59:63:9b:21:61: 13:50:66:4f:7f:06:9d:8c:5a:31:06:a0:59:13:ce: 3d:c3:9d:e3:e6:c6:60:cd:5e:7f:a4:5d:57:1d:5a: 43:fe:6e:a8:d0:8d:99:8d:14:69:72:23:d3:99:e5: 5d:e0:48:a9:1b:d8:78:e6:a6:03:73:d9:61:4b:54: 42:a1:74:f4:e9:e8:04:34:37:22:6b:5b:f9:5c:0e: 73:78:18:f7:f8:33:79:ba:4a:44:ca:6d:a7:9d:f6: c6:f7:9e:9a:93:b0:b2:52:d3:db:61:5b:a6:a8:0b: 63:6f:42:b0:8d:af:5b:0d:95:a3:12:9d:61:12:63: ac:3e:c7:30:78:94:50:85:95:5e:c9:a3:dd:b7:b8: 88:2d:69:08:97:bb:23:d1:a2:f6:81:34:0e:4c:56: c3:a3:87:ab:f7:44:5a:95:7b:04:4b:fb:20:a5:ca: 42:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2D:EC:64:7A:25:D9:91:F7:7A:51:1B:5F:A3:10:5D:84:D2:2C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32f3d38e-c211-345a-82f5-50a97e79c6ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:cb:78:ba:fd:64:de:5b:d0:93:e4:3f:e2:54:44:64:72:fd: 68:18:1d:ff:6d:cc:0a:9b:13:a2:5c:cd:b1:b4:52:27:03:2f: 0a:b3:23:a5:cb:b0:bd:4e:c8:a9:40:e9:53:47:94:05:20:a6: b5:c2:7a:75:09:96:80:9c:a9:23:b5:d2:95:11:7a:46:63:75: 9d:64:92:78:47:f2:a6:74:6f:0d:60:8b:4d:a4:a3:67:ef:b8: 25:78:5d:8a:fb:c4:b3:00:91:7c:04:f1:36:a3:43:82:67:76: 5f:cb:da:cf:1a:a8:c7:b7:fd:bf:c9:fb:6b:e1:e4:b8:a4:73: 05:23:1e:f4:e6:ab:cc:1c:60:71:ec:42:45:0b:9b:c8:70:b8: 5e:85:f6:5d:db:38:04:22:79:a5:12:28:f2:d6:92:67:df:02: f9:b0:95:65:73:07:54:59:20:91:8f:5c:1d:d4:36:74:c8:ca: 03:86:87:6d:7c:ff:30:79:9b:72:7c:f9:14:ff:28:b9:e1:57: b6:8c:8e:0a:66:d4:f9:6c:da:81:a3:41:15:39:9b:48:c1:1a: 7c:1a:ac:1d:ca:93:da:c5:00:56:32:e2:cb:60:b6:58:1e:a2: b4:f0:16:a9:0c:92:75:ba:19:68:03:ec:ab:69:6c:23:57:5c: c6:c5:00:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpHvKpzFAdfT12AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk ODJiYTMxMzktMmQ1OC00OGM2LTlmMDgtYjFlMzk1MDJlZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY70OBDXsZ2iunnqwDdCW5y+WcW7efM5BZEO wP9PABApidcJ60g23WR/8eC/MSrA3m/RtkZCN6LpJ8ff0DSeNFES9TwZ/wpuWxct YExc1tONtOwbWWObIWETUGZPfwadjFoxBqBZE849w53j5sZgzV5/pF1XHVpD/m6o 0I2ZjRRpciPTmeVd4EipG9h45qYDc9lhS1RCoXT06egENDcia1v5XA5zeBj3+DN5 ukpEym2nnfbG956ak7CyUtPbYVumqAtjb0Kwja9bDZWjEp1hEmOsPscweJRQhZVe yaPdt7iILWkIl7sj0aL2gTQOTFbDo4er90RalXsES/sgpcpCPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFct7GR6JdmR93pRG1+jEF2E0iyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzJmM2QzOGUtYzIxMS0z NDVhLTgyZjUtNTBhOTdlNzljNmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRULWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzLeLr9ZN5b0JPkP+JURGRy/WgYHf9tzAqbE6JczbG0UicDLwqzI6XL sL1OyKlA6VNHlAUgprXCenUJloCcqSO10pURekZjdZ1kknhH8qZ0bw1gi02ko2fv uCV4XYr7xLMAkXwE8TajQ4Jndl/L2s8aqMe3/b/J+2vh5LikcwUjHvTmq8wcYHHs QkULm8hwuF6F9l3bOAQieaUSKPLWkmffAvmwlWVzB1RZIJGPXB3UNnTIygOGh218 /zB5m3J8+RT/KLnhV7aMjgpm1Pls2oGjQRU5m0jBGnwarB3Kk9rFAFYy4stgtlge orTwFqkMknW6GWgD7KtpbCNXXMbFAFE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:54:12 2025 by rpki-client